After </system.web> & before </configuration><location path="Admin"<><system.web><authorization><!-- Order and case are important below --><allow roles="a"><deny users="*"></deny></allow></authorization><location path="Client"><system.web><authorization><!-- Order and case are important below --><allow roles="c,a"><deny users="*"></deny></allow></authorization>